privoxy (3.0.24-1) unstable; urgency=medium

  * New upstream version 3.0.24.
  * This fixes CVE-2016-1982 and CVE-2016-1983.
  * Adapt all patches to new upstream version.

 -- Roland Rosenfeld <roland@debian.org>  Fri, 22 Jan 2016 16:08:05 +0100

privoxy (3.0.23-5) unstable; urgency=medium

  * Remove /lib/init/vars.sh from init script since it is no longer used.
    As a consequence remove initscripts dependency (Closes: #804961).
  * --enable-external-filters (Closes: #805296).

 -- Roland Rosenfeld <roland@debian.org>  Mon, 16 Nov 2015 21:05:41 +0100

privoxy (3.0.23-4) unstable; urgency=medium

  * Add rotate option to init.d script.
  * Change logrotate to use rotate option (Closes: #783399).
  * privoxy.service: define SuccessExitStatus=15.
  * Set locales to C.UTF-8 for doc generation to make build reproducible.
  * Run wrap-and-sort.
  * 34_system-docbook2man: Use Debian docbook2man-spec.pl (from
    docbook-utils) instead of local copy, to make package reproducible.
  * Stop runing "make man2html", since this overrides "make man", which
    should work reproducible.

 -- Roland Rosenfeld <roland@debian.org>  Sat, 19 Sep 2015 15:05:41 +0200

privoxy (3.0.23-3) unstable; urgency=medium

  * Since there are no new bugs found, this goes to unstable now.
  * Depend on perl-base instead of full perl.

 -- Roland Rosenfeld <roland@debian.org>  Sun, 26 Apr 2015 11:01:08 +0200

privoxy (3.0.23-2) experimental; urgency=low

  * Fix cleanup to allow build twice in a row.
  * Preserve auto build configuration from source package.
  * This version checks and fails if the config file has erros
    (Closes: #518006).
  * init script is no longer silent (Closes: #543811).

 -- Roland Rosenfeld <roland@debian.org>  Sat, 31 Jan 2015 12:31:26 +0100

privoxy (3.0.23-1) experimental; urgency=low

  * New upstream version 3.0.23-stable.
  * Update all patches.

 -- Roland Rosenfeld <roland@debian.org>  Mon, 26 Jan 2015 14:15:47 +0100

privoxy (3.0.22-1) unstable; urgency=low

  * New upstream version 3.0.22-stable.
  * Update all patches.
  * Upgrade to Standards-Version 3.9.5 (no changes).
  * Add upstream GPG signature check.
  * Convert debian/copyright to DEP5.

 -- Roland Rosenfeld <roland@debian.org>  Sun, 16 Nov 2014 18:38:40 +0100

privoxy (3.0.21-7) unstable; urgency=medium

  * 37_CVE-2015-1380: denial of service.
  * 38_CVE-2015-1381: multiple segmentation faults and memory leaks in the
    pcrs code.
  * 39_CVE-2015-1382: invalid read.
  * These 3 patches Closes: #776490.

 -- Roland Rosenfeld <roland@debian.org>  Wed, 28 Jan 2015 19:46:42 +0100

privoxy (3.0.21-5) unstable; urgency=low

  * 34_CVE-2015-1030: Fix memory leak in rfc2553_connect_to().  CID 66382
  * 35_CVE-2015-1031-CID66394: unmap(): Prevent use-after-free if the map 
    only consists of one item.  CID 66394.
  * 36_CVE-2015-1031-CID66376: pcrs_execute(): Consistently set *result to
    NULL in case of errors.  Should make use-after-free in the caller less
    likely.  CID 66391, CID 66376.
  * These 3 patches Closes: #775167.
  
 -- Roland Rosenfeld <roland@debian.org>  Mon, 12 Jan 2015 08:44:23 +0100

privoxy (3.0.21-4) unstable; urgency=low

  * Enable hardening=+all
  * Hardcode PIDFile in privoxy.service, since this isn't allowed as
    variable (Closes: #746262).

 -- Roland Rosenfeld <roland@debian.org>  Sat, 10 May 2014 14:19:03 +0200

# For older changelog entries, run 'apt-get changelog privoxy'
